PHP Login System - Please Help

wowcrofty · July 20, 2010

I have posted this topic several times in the past and I have never fully been able to receive the explanation I need, so I am hoping that someone will be willing to help me this time. I am the webmaster for a local Boy Scout Troop and I am working on developing a PHP login system to provide a more personalized experience. I am using MySQL for the user database and PHP to interface with it. Currently I am able to add users via a webpage and authenticate the created user via a log in page. I enter the user name and password on the page and it then displays a white page that says "Login Successful" if it is correct or redirects me back to the login page if it is incorrect. I am very new to both MySQL and PHP and I have no idea what to do after the user is successfully authenticated. How would I go about using the currently logged in user to display personalized information on a subsection of my site and how would I change the contents of the pages if another user logged in? I am hoping to get a step to step guide on this if possible because I was told that I would have to use sessions, but I really don't understand how that works. Below is included my HTML and PHP code for reference.

login.php (user authentication)

<?

$username="xxxx";

$password="xxxx";

$database="xxxx";

$host="xxxx";

$user=$_POST['user'];

$pass=$_POST['pass'];

@mysql_connect($host,$username,$password);

@mysql_select_db($database) or die("Unable to select database");

$sql="SELECT username, `password` FROM users WHERE username='$user' and `password`='$pass'";

$r=mysql_query($sql);

if(!$r){

$err=mysql_error();

print $err;

exit();

}

if(mysql_affected_rows()==0){

header("Location:user_login.htm");

print "Invalid User Name/Password. Please try again";

exit();

}

else{

header("Location:memberhome.htm");

exit();

}

?>

user_login.html (user login)

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<head>

<title>Troop 322 of DC: Login</title>

.style1 {

text-align: center;

}

.style30 {

vertical-align: middle;

}

.style31 {

font-family: Arial;

}

.style32 {

margin-left: 5px;

}

.style33 {

font-family: "Arial Black";

font-size: medium;

}

</style>

</head>

<tr>

<td>

<td>

<td>

</tr>

<tr>

</tr>

</table>

<br /><span class="style33">Enter the User Name and Password assigned to you

below to access personalized pages and information on the site. If you

do not have an account, please contact one of our Webmasters and a profile

will be set up for you.<br />

</span><br />

</div>

<span class="style31"><strong>User Name

Password </strong></span><strong>

</strong>

<br />

</form>

</body>

</html>

register.php (user registration)

<?

$username="xxxx";

$password="xxxx";

$database="xxxx";

$host="xxxx";

$user=$_POST['user'];

$pass=$_POST['pass'];

$firstname=$_POST ['firstname'];

$lastname=$_POST ['lastname'];

$email=$_POST ['email'];

@mysql_connect($host,$username,$password);

@mysql_select_db($database) or die("Unable to select database");

$query = "INSERT into users VALUES ('','$user','$pass','$firstname','$lastname','$email')";

mysql_query($query);

mysql_close();

?>

user_registration.html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<head>

<title>Untitled 1</title>

</head>

<body>

Desired User Name <input type="text" name="user">

<br />

Desired Password <input type="text" name="pass">

<br />

First Name <input type="text" name="firstname" size="30">

<br />

Last Name

<input type="text" name="lastname"

<br />

Email

<input type="text" name="email"

<br />

</form>

</body>

</html>

Thank you in advance for your assistance!

dezkit · July 20, 2010

<?php
session_start();

$username="xxxx";
$password="xxxx";
$database="xxxx";
$host="xxxx";

$user=stripslashes(mysql_real_escape_string($_POST['user']));
$pass=stripslashes(mysql_real_escape_string($_POST['pass']));

@mysql_connect($host,$username,$password);
@mysql_select_db($database) or die("Unable to select database");

$sql="SELECT username, `password` FROM users WHERE username='$user' and `password`='$pass'";
$r=mysql_query($sql);
if(!$r){
$err=mysql_error();
print $err;
exit();
}
if(mysql_affected_rows()==0){
header("Location:user_login.htm");
print "Invalid User Name/Password. Please try again";
exit();
}
else{
header("Location:memberhome.htm");
$_SESSION["user"] = $user;
exit();
}
?>

memberhome.php <- note it must be php

<?php
session_start();
if(!$_SESSION["user"]){
header("location: index.php");
}
// all the code that the member can see
echo "Welcome back," . $_SESSION["user"];
?>

I suggest you look into this tutorial - http://phpeasystep.com/phptu/6.html

Sign In

PHP Login System - Please Help

Recommended Posts

wowcrofty

Link to comment

Share on other sites

dezkit

Link to comment

Share on other sites

Join the conversation

Browse

Activity

Important Information